Hospital Management System
CVE-2023-34651
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Lifecycle Timeline
1DescriptionNVD
PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).
AnalysisAI
PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). Affected products include: Hospital Management System Project Hospital Management System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.
More in Hospital Management System
View allAn arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows
SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute ar
A vulnerability was found in SourceCodester Hospital Management System 1.0. Rated critical severity (CVSS 9.8), this vul
A vulnerability was found in Hospital Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is r
A vulnerability was found in Hospital Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is r
A vulnerability was found in Hospital Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is r
A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to ex
Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Pa
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orde
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doc
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adm
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today